>> ARCHIVE: 2020-10

CSE Bookstore version 1.0 suffers from a persistent cross site scripting vulnerability.

DedeCMS version 5.8 suffers from a cross site scripting vulnerability.

Agent Tesla Botnet suffers from a cross site scripting vulnerability.

Citadel WebCit versions prior to 926 suffer from a session hijacking vulnerability.

Wondershare Dr.Fone version 3.0.0 suffers from an unquoted service path vulnerability.

Simple College Website version 1.0 suffers from code execution and remote SQL injection vulnerabilities.

The Microsoft Windows Kernel Cryptography Driver (cng.sys) exposes a DeviceCNG device to user-mode programs and supports a variety of IOCTLs with non-trivial input structures. It constitutes a locally accessible attack…

Online Examination System version 1.0 suffers from a persistent cross site scripting vulnerability.